Splunk with suricatanot reading eve.json

Getting Data In

I have checked suricata TA app for reading intrusion but as I see it doesn't read eve.json but it reads only fast.log
How to add into it eve.json?

Can you share inputs.conf you are using?

Get Updates on the Splunk Community!

As software delivery cycles continue to accelerate, observability shouldn’t be a luxury — it should be a ...

Let’s say I’m running a travel planning AI app in production. A user asks for three concise hotel options in ...

This puzzle (first published here) is based on finding groups of tessellated tiles (inspired by floor tiles I ...

Join the Conversation